We are thrilled to announce the release of our latest wave of updates and enhancements to our managed service, the 'Guardz' suite, tailored specifically to provide enhanced threat monitoring, early ransomware detection, enhanced email security and streamlined management capabilities.
Evolving Threat Monitoring & Filters, Early Ransomware Detection
As the cybersecurity landscape continues to evolve at a rapid pace, it is essential to stay one step ahead and as such, so does our Threat Monitoring & Filters, Early Ransomware Detection solution. Our solution will continuously aims to empower our users to navigate the ever-changing cybersecurity game with confidence and ease.
AI-Based Email Impersonation Detection
Impersonation attempts by email are becoming more common and more sophisticated. The research team has identified hundreds of attempts at impersonation in recent weeks that likely would have been missed by most standard email security tools.
In order to safeguard against such fraudulent email activities, the team have built a new scanning service that utilises large language models (LLMs) to analyse incoming emails to detect signs of impersonation.
Common discoveries include discrepancies in sender information, unusual language patterns, and other anomalies that are indicative of phishing or spoofing attempts. By identifying and flagging potentially malicious emails, this feature plays a crucial role in protecting users from identity theft, financial fraud, and unauthorised access to sensitive information, thereby enhancing overall email security and trust for MSPs and their clients.
Search & Filters
As the platform has grown and expanded to include more and more datasets across issues, users, devices, and more, it has become time to rethink how our users are able to access the information they need to drive important security decisions.
The new search and filtering design has two goals: predictable & flexible experience to make sure users can dive into the specific data, based on a wide variety of criteria, for their employees.
Early Ransomware Detection (Limited Release)
We’re hard at work on some new Early Ransomware Detection and Response in our endpoint agent. These new capabilities are currently in early release but will be reaching general availability very soon.
The new File Integrity Check is a feature that installs and monitors a “bait” file on the device and will trigger an issue as soon as these files are edited or modified in any way (including encryption). This serves as an indication of ransomware or other malware messing with files.
As a strong response to this detection, Device Isolation can be initiated to disable all the network connections on the endpoint and actively prevent the flow of packets to/from the device. These new capabilities can be found in the Device Details drawer as well as in the relevant issues.
We can’t wait for you to experience the newest updates! Keep your eyes peeled for more to come!
Comments